Classifications

• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
  • G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
  • G06F21/79—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data in semiconductor storage media, e.g. directly-addressable memories
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
  • G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
  • G06F21/88—Detecting or preventing theft or loss
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N1/00—Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
  • H04N1/44—Secrecy systems
  • H04N1/4406—Restricting access, e.g. according to user identity
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N1/00—Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
  • H04N1/44—Secrecy systems
  • H04N1/4406—Restricting access, e.g. according to user identity
  • H04N1/4426—Restricting access, e.g. according to user identity involving separate means, e.g. a server, a magnetic card
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N1/00—Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
  • H04N1/44—Secrecy systems
  • H04N1/4406—Restricting access, e.g. according to user identity
  • H04N1/444—Restricting access, e.g. according to user identity to a particular document or image or part thereof
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2111—Location-sensitive, e.g. geographical location, GPS
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2143—Clearing memory, e.g. to prevent the data from being stolen
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N1/00—Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
  • H04N1/00127—Connection or combination of a still picture apparatus with another apparatus, e.g. for storage, processing or transmission of still picture signals or of information associated with a still picture
  • H04N1/00347—Connection or combination of a still picture apparatus with another apparatus, e.g. for storage, processing or transmission of still picture signals or of information associated with a still picture with another still picture apparatus, e.g. hybrid still picture apparatus
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N2201/00—Indexing scheme relating to scanning, transmission or reproduction of documents or the like, and to details thereof
  • H04N2201/0077—Types of the still picture apparatus
  • H04N2201/0087—Image storage device
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N2201/00—Indexing scheme relating to scanning, transmission or reproduction of documents or the like, and to details thereof
  • H04N2201/0077—Types of the still picture apparatus
  • H04N2201/0094—Multifunctional device, i.e. a device capable of all of reading, reproducing, copying, facsimile transception, file transception

Definitions

• the present invention relates to a data storage apparatus which stores data, a data processing apparatus which can perform input and output processes with respect to data of, e.g., a multifunctional machine or the like, an information processing system which includes at least the data storage apparatus and the data processing apparatus, and a data storage method which stores data by using the data storage apparatus .
• latitude/longitude information representing an installation location of a semiconductor manufacturing apparatus is compared and checked with latitude/longitude information representing an installation location of a user apparatus to which remote access should be permitted, and the remote access is disconnected when it is judged as the result of the comparison that the information representing the installation location of the user apparatus is wrong (e.g., Japanese Patent Application Laid-Open No. 2001-306530) .
• specific information representing an image storage apparatus of storing image data is administrated. More specifically, when the image data is requested from an external apparatus, the image storage apparatus of storing the image data is specified based on the specific information.
• the storage location of the image data can be freely and easily changed without deteriorating user's convenience by specifying the image storage apparatus of storing the image data in question on the basis of the specific information (e.g., Japanese Patent Application Laid- Open No. . 2000-105677) .
• specific information e.g., Japanese Patent Application Laid- Open No. . 2000-105677
• external storage apparatuses such as a hard disk drive and the like become small but have large capacities, whereby it is easier to store large-amount data in the external storage apparatus and then bring/move it to an arbitrary location.
• the present invention specifies a location by externally receiving a signal, and disables from reading data stored in a recording medium according to the specified location, thereby enabling to perform a process of preventing data leakage when a data storage apparatus is used at a location other than a predetermined location.
• the present invention receives location information externally, and disables from reading data stored in the recording medium according to the location represented by the received location information, thereby enabling to perform the process of preventing the data leakage when the data storage apparatus is used at a location other than the predetermined location. Furthermore, the present invention receives location information being the information concerning a data storage apparatus installation location from the data storage apparatus having a recording medium for storing data, and judges based on the location represented by the received location information whether or not to use the data storage apparatus, thereby enabling to perform the process of preventing the data leakage when the data storage apparatus is used at a location other than the predetermined location. BRIEF DESCRIPTION OF THE DRAWINGS Fig.
• FIG. 1 is a diagram showing the schematic structure of an information processing system which is equipped with a data storage apparatus according to the embodiment of the present invention and network equipment (data processing apparatus) ; .
• FIG. 2 is a block diagram showing an example of the internal structure of each of the MFP's (Multi Function Peripherals) 103a, 103b, 103c and 104 shown in Fig. 1;
• Fig. 3 is a block diagram showing an example of the hardware structure of the core unit 206 shown in Fig. 2 and its peripheral units;
• Fig. 4 is a block diagram showing an example of the internal structure of the data storage apparatus 102 shown in Fig. 1; Fig.
• FIG. 5 is a diagram showing that the location information provisioning terminals 100-A to 100-F provide location information to the data storage apparatus 102, the MFP's 103a to 103c, and the MFP 104 through close-range communication;
• Fig. 6 is a diagram showing an example of the access control information to be held in the data storage apparatus 102;
• Fig. 7 is a diagram showing an example of the access control information to be held in the MFP's 103a to 103c and the MFP 104;
• Fig. 8 is a diagram showing an example of access control information to be held in the MFP 104;
• Fig. 9 is a flow chart showing the boot process to be performed when the power supply of the data storage apparatus 102 is turned on in the information processing system shown in Fig.
• Figs. 10A and 10B are flow charts showing an example of the data security protection process to be performed when the data storage apparatus 102 is activated outside the installation permission location;
• Fig. 11 is a flow chart showing an example of the process that the data storage apparatus 102 changes the network activation permission location information 601 when the result of the step S806 in Fig. 9 is "NO";
• Fig. 12 is a flow chart showing an example of the process to be performed when data writing from the MFP 104 to the data storage apparatus 102 is performed;
• Fig. 13 is a diagram showing an example of the operation screen of each of the MFP's 103a to 103c and the MFP 104 shown in Fig. 1;
• Fig. 14 is a diagram showing an example of the message and the setting change GUI (graphical user interface) to be displayed on the operation screen 404a of the operation unit 404;
• Fig. 15 is a diagram showing an example of the screen to be used to display/change various setting areas concerning the data storage apparatus 102; and
• Fig. 16 is a diagram showing an example of the access non-permission message to be displayed on the operation screen 5a of the operation unit 5.
• Fig. 1 is a diagram showing the schematic structure of the information processing system equipped with the data storage apparatus according to the embodiment and the network equipment (data processing apparatus).
• numerals 103a, 103b, 103c and 104 respectively denote data processing apparatuses acting as the network equipment.
• the data processing apparatus is a multifunctional apparatus, called an MFP (Multi Function Peripheral) , which has a multi-purpose function.
• MFP Multi Function Peripheral
• the data processing apparatuses 103a to 103c and 104 are respectively connected to a network 101.
• the network equipment, the multifunctional apparatus, and the MFP are all equivalent to the data processing apparatus.
• the network equipment 104 which is also called the MFP 104
• the color MFP capable of performing scanning, printing and the like in full color.
• the network equipments 103a to 103c which are also called the MFP's 103a to 103c, are the black-and-white MFP's capable of performing scanning, printing and the like in black and white.
• Numeral 105 denotes a computer terminal which has a function to connect with the network 101, and a function to use a data storage apparatus 102 and the MFP's 103a to 103c and 104. That is, the computer terminal 105 is the general computer terminal which is used by a user for creating a document or the like. Incidentally, the computer terminal 105 is equipped with a display device such as a CRT (cathode ray tube), an LCD (liquid crystal display) and the like, and an input device such as a keyboard, a mouse and the like capable of being handled by the user.
• Numeral 102 denotes the data storage apparatus 102 which can be connected to the network 101 and is equipped with a storage medium (or recording medium) of storing various data.
• the data storage apparatus 102 contains as the recording medium a hard disk and connects with the network 101 by using an iSCSI (Internet SCSI (Small Computer System Interface)) protocol.
• iSCSI Internet SCSI (Small Computer System Interface)
• IP Internet Protocol
• SCSI command used in the communication between a storage and a computer. That is, by using the iSCSI protocol, it is possible to directly connect the data storage apparatus such as 'a large-capacity hard disk or the like onto a TCP/IP (Transmission Control Protocol/Internet Protocol) network such as an inter-office LAN (local area network) or the like, and it is thus possible to share the connected data storage apparatus by plural computers .
• the data storage apparatus 102 saves and stores various data transmitted from the MFP's 103a to 103c and 104 through the network
• each of the location information provisioning terminals 100-A to 100-F stores floor information (representing, e.g., a floor number and a living room (or sitting room) number where the terminal in question is installed) as location information for specifying the location where each of the location information provisioning terminals 100-A to 100-F.
• the location information is not limited to the floor number information. That is, as the location information, it is preferable to use various information such as information concerning latitude/longitude, information concerning virtual coordinates in a living room, and the like, according to a range and an object which are intended to administrate the installation location of the data storage apparatus 102. (structural example of MFP's 103a to 103c and 104) Next, an example of the internal structure of each of the MFP's 103a to 103c and 104 will be explained. Fig.
• FIG. 2 is a block diagram showing the example of the internal structure of each of the MFP's 103a to 103c and 104.
• the MFP 104 can process color images and documents, while the MFP's 103a to 103c can process black and white images and documents. That is, the difference between the MFP 104 and the MFP's 103a to 103c is only the above point, and other parts of the MFP 104 are substantially equivalent to those of the MFP's
• Fig. 2 will be explained with respect to the structure of the MFP 104, and the structure of each of the MFP's 103a to 103c will be incidentally explained as needed.
• numeral 3 denotes an HD (hard disk) which is provided in the MFP 104 and stores various data as needed
• numeral 5 denotes an operation unit which includes a display part and an operation part.
• the display part is equipped with a screen that a user watches when handling the MFP 104, and the operation part is equipped with buttons and the like that the user handles according to the displayed contents of the display part.
• Numeral 6 denotes a formatter unit which extracts PDL (page-description language) data into image data.
• Numeral 201 denotes a scanner unit which reads the image data from an original
• numeral 202 denotes a scanner IP (image processor) unit which performs an image process to the image data read by the scanner unit 201
• Numeral 203 denotes a FAX unit, typified by general facsimile or the like, which transmits and receives the image data by using a telephone line
• numeral 204 denotes an NIC (network interface card) unit which transmits and receives the image data and device information through the network 101.
• a PDL unit is provided to extract the PDL data transmitted from a computer side into an image signal (e.g., bitmap image signal) .
• Numeral 206 denotes a core unit which controls the respective units, temporarily stores the image signals, and determines data input/output paths, in accordance with use of the MFP 104.
• the HD 3 the operation unit 5, the formatter unit 6 and a location information obtaining , unit 9 are connected to the core unit 206.
• the image data output from the core unit 206 is processed through a printer IP (image processor) unit 207 and a PWM (pulse width modulation) unit 208, and then the processed data is input to a printer unit 209.
• printer IP image processor
• PWM pulse width modulation
• the printer unit 209 an image formation (print) process for a paper (printing media) is performed based on the input image data, and the print-processed papers are output to a finisher unit 210 and then subjected to a finishing process.
• the location information obtaining unit 9 obtains the location information from closest one of the location information provisioning terminals 100-A to 100-F through radio communication, and transfers the obtained information to the core unit 206.
• the MFP's 103a to 103c and 104 resultingly have the location information obtaining unit 9.
• FIG. 3 is a block diagram showing an example of the hardware structure of the core unit 206 shown in Fig. 2 and its peripheral units.
• the core unit 206 includes a digital video I/F (interface) 121.
• the core unit 206 is connected' to the scanner IP unit 202 through the digital video I/F 121.
• the core unit 206 is connected to the HD 3, the operation unit 5, the formatter unit 6, the NIC unit 204 and the location information obtaining unit 9 respectively shown in Fig. 2 through a core-unit main bus 125 (simply called a main bus 125 hereinafter) and an I/F 120.
• the image data read by the scanner unit 201 is transferred to a data processing unit 124 through the scanner IP unit 202, the digital video I/F 121 and the main bus 125.
• a control command output from the scanner unit 201 is transferred to a CPU 122 through the scanner IP unit 202, the digital video I/F 121 and the main bus 125.
• the data processing unit 124 is the image processing means for performing image processes such as a rotation process, a magnification change process and the like to the image data.
• the image data transferred from the scanner unit 201 and processed by the data processing unit 124 is further transferred to the in-MFP HD 3 or the NIC unit 204 through the main bus 125 ' and the I/F 120, in accordance with the control command transferred to the CPU 122 simultaneously with the image data.
• a print request command (including PDL data) is transmitted from the computer terminal 105 shown in Fig. 1 through the NIC unit 204, the CPU 122 which received the print request command through the I/F 120 transfers the simultaneously transmitted PDL data to the formatter unit 6 through the I/F 120.
• the PDL data. is extracted into the image data by the formatter unit 6, and the obtained image data is again transferred to the data processing unit 124 through the I/F 120.
• the image data transferred from the formatter unit 6 is subjected to the image process by the data processing unit 124, and the processed image data is further transferred to the printer IP unit 207 through the I/F 120.
• the image data is print-output through the printer IP unit 207, the PWM unit 208, the printer unit 209 and the finisher unit 210 as shown in Fig. 2.
• the CPU 122 appropriately confirms the status in the formatter unit 6 and the status in IP unit 207, the PWM unit 208, the printer unit 209 and the finisher unit 210, and thus notifies the NIC unit 204, the location information obtaining unit 9 or the Operation unit 5 of the status concerning the printing through the I/F 120. Moreover, the CPU 122 totally controls the above operation according to a control program stored in a memory 123 and the control command transferred from the scanner unit 201. Besides, the memory 123 is also used as the working area of the CPU 122.
• Fig. 4 is a block diagram showing an example of the internal structure of the data storage apparatus 102 shown in Fig. 1.
• numeral 401 denotes a location information obtaining unit which obtains the location information shown in Fig.
• numeral 402 denotes a storage medium unit which is a large-capacity hard disk for storing various data. Besides, the storage medium unit 402 also stores access control information using the location information.
• Numeral 403 denotes a network I/F unit which can be connected to the network 101 by using the iSCSI protocol and thus exchange the various data through the network 101.
• Numeral 404 denotes an operation unit which includes a display part of displaying information concerning the status of the data storage apparatus 102, an error and the like, and operation buttons to be used by the user to handle the data storage apparatus 102.
• Numeral 405 denotes a CPU which totally controls the entire process of the data storage apparatus 102 and holds therein an encryption key for encryption.
• the CPU 405 encrypts/decrypts the data by using the held encryption key as needed.
• the CPU 405 controls the location information obtaining unit 401, the storage medium unit 402, the network I/F 403 and the operation unit 404 through a CPU bus 408 and an I/F 407.
• Numeral 406 denotes a memory which acts as the work memory of the CPU 405.
• the structure of the data storage apparatus 102 is not limited to the above. That is, it only has to be the structure which at least has a function to store the data and enable the computer to read the stored data, a function to obtain the location information, and a function to perform various processes to the stored data according to the obtained location information.
• ⁇ example of access control information held in data storage apparatus 102
• An example of the access control information to be held in the data storage apparatus 102 will be explained hereinafter.
• Fig. 6 is a diagram showing an example of the access control information to be held in the data storage apparatus 102.
• current location information 600 is the location information obtained by the location information obtaining unit 401 and is also the information concerning the current location of the data storage apparatus 102.
• floor information "31 living room (window side) " is stored as the current location information 600.
• “31 living room” indicates a living room of the first room on the third floor. More specifically, the second-digit number "3" indicates the floor number, the first-digit number "1” indicates the room number, and the last characters "living room” indicates the kind of room. That is, for example, "42 laboratory” indicates a laboratory of the second room on the fourth floor.
• “window side” is the information which is added, as needed, in the case where the location information is obtained from the terminal, such as the location information provisioning terminal 100-C or 100-F of Fig. 1, located at the window side.
• Network activation permission location information 601 is the information for defining the area where the data storage apparatus 102 is shifted as being connected to the network 101.
• “31 living room” is defined as the network activation permission location information 601.
• HD installation permission location information 602 is the information for defining the range where the data storage apparatus 102 is brought out. In Fig.
• the two rooms of "31 living room” and "32 living room” are defined as the HD installation permission location information 602.
• the location information obtained by the location information obtaining unit 401 is outside the area in question, a process for preventing data leakage is performed for confidentiality if a "predetermined condition" is satisfied. That is, for example, the encryption key held in the CPU 405 is invalidated, or the data held in the storage medium unit 402 is deleted.
• a predetermined condition necessary to perform the process for preventing data leakage and the concrete process operation concerning the "predetermined condition" will be described later.
• Group equipment installation location information 603 is the information for defining the installation locations of the MFP's 103a to 103c and 104 which access the data storage apparatus 102 by using the iSCSI protocol. More specifically, the group equipment installation location information 603 is obtained by associating the location information with a- group ID.
• the group ID is to specify the equipment group of the MFP's 103a to 103c and 104 (i.e., in units of department, in units of installation location, or the like)
• the location information is to specify the installation location of the equipment which belongs to the group ID in question.
• the location information "31 living room, 32 living room, 42 laboratory, 43 laboratory” is associated with the group ID "NATTOl".
• correspondence information of the group ID and an access key is the information which defines a group ID 604 being the information for specifying the equipment group and an access key 605 being the key (e.g., character string) for permitting the equipment group corresponding to the group ID 604 to access the hardware storage apparatus.
• group ID 604 being the information for specifying the equipment group
• an access key 605 being the key (e.g., character string) for permitting the equipment group corresponding to the group ID 604 to access the hardware storage apparatus.
• the combination of "NATTOl” and "XXX” and the combination of “NATT02" and “YYY” are shown as the correspondence information of the group ID 604 and the access key 606.
• example of access control information held in MFP's 103a to 103c and MFP 104 examples of the access control information to be held in the MFP's 103a to 103c and the MFP 104 will be explained hereinafter. Figs .
• FIG. 7 and 8 are diagrams respectively showing the examples of the access control information to be held in the MFP's 103a to 103c and the MFP 104, and Fig. 7 will be explained hereinafter.
• current location information 700 is the location information obtained by the location information obtaining unit 9 and is also the information concerning the current location of each of the MFP's 103a to 103c. More specifically, as shown in Fig. 7, floor information "31 living room (window side) " is stored as the current location information 700.
• group equipment installation location information 501 is the information for defining the installation locations of the MFP's 103a to 103c and 104 in the corresponding equipment group to which these MFP's and the like belong. As shown in Fig.
• each of the MFP's 103a to 103c can be installed in "31 living room, 32 living room, 42 laboratory, 43 laboratory” .
• correspondence information of the group ID and an access key is the information which defines a group ID 502 being the information for specifying the equipment group and an access key 503 being the key (e.g., character string) for permitting the equipment group corresponding to the group ID 502 to access the hardware storage apparatus.
• the combination of "NATTOl” and "XXX” is shown as the correspondence information of the group ID 502 and the access key 503.
• box discrimination information 504 is the information for discriminating the data storage apparatus 102, and an HDID (hard disk ID) is used in the embodiment.
• HDID hard disk ID
• the HDID "SHARED BOX-A" for discriminating the data storage apparatus 102 is stored as the box discrimination information 504.
• the information example shown in Fig. 8 is the information example of the MFP 104 similar to that of each of the MFP's 103a to 103c, whereby the explanation thereof will be omitted.
• each of the MFP's 103a to 103c and 104 obtains a set of the group ID 502 to which the MFP in question belongs and the access key 503 which corresponds to the group ID in question, from the data storage apparatus 102.
• the MFP's 103a to 103c and 104 are installed respectively at the locations defined by the group equipment installation location information 501, they can obtain the access key 503 from the data storage apparatus 102 (or the access key 605 in the data storage apparatus 102) .
• the process to be performed when the power supply of the data storage apparatus 102 is turned on in the information processing system shown in Fig. 1 will be explained. More specifically, a boot (or start-up) process of the data storage apparatus 102 and a box expansion process to be performed according to the boot process in the MFP's 103a to 103c and 104 connected to the network 101 will be explained.
• the box expansion process is the process to register the data storage apparatus 102 as a hard disk capable of writing/reading data in the MFP's 103a to 103c and 104. That is, in each of the MFP's 103a to 103c and 104, a "box" indicates the data storage apparatus 102 registered to be usable by the MFP.
• Fig. 9 is a flow chart showing the boot process to be performed when the power supply of the data storage apparatus 102 is turned on in the information processing system shown in Fig. 1. In a step S801, when a user turns on the power supply of the data . storage apparatus 102, as shown in Fig.
• the data storage apparatus 102 causes the location information obtaining unit 401 to perform the location information obtaining process shown in Fig. 5 to obtain the location information from the closest one of the location information provisioning terminals 100-A to 100-F.
• a step S802 it is judged by the data storage apparatus 102 whether or not the location information obtaining unit 401 can obtain the location information.
• the data storage apparatus 102 sets the obtained location information to the current location information 600 shown in Fig. 6 as the information concerning the current location, and the flow advances to a step S804.
• the step S804 it is judged by the data storage apparatus 102 whether or not the obtained location information (i.e., information set to the current location information 600) coincides with the HD installation permission location information 602.
• Fig. 10A is the flow chart showing an example of the data security protection process to be performed when the data storage apparatus 102 is activated outside the installation permission location. As shown in Fig.
• the data storage apparatus 102 performs the process to invalidate the encryption key held in the CPU 405 and also delete the data held in the storage medium unit 402.
• the power supply of the data storage apparatus 102 is turned off.
• the data storage apparatus 102 is activated outside the location defined by the HD installation permission location information 602 shown in Fig. 6, such activation is considered as improper activation, and therefore the encryption key and the stored data are deleted to protect data security.
• the flow advances to a step S807.
• the data storage apparatus 102 performs the process in steps S901 to S903 shown in Fig. 11. The details of the process in Fig. 11 will be explained later.
• the data storage apparatus 102 broadcasts the current location information 600 and the HDID to the MFP's 103a to 103c and 104.
• the MFP 104 receives and obtains the current location information 600 and the HDID from the data storage apparatus 102.
• a step S811 it is judged by the MFP 104 whether or not the current location information 600 of the data storage apparatus 102 coincides with the group equipment installation location information 501.
• the flow advances to a step S812 to transmit the current location information 700 of the MFP 104 and the group ID 502 to the data storage apparatus 102. Then, the data storage apparatus 102 receives the current location information 700 of the MFP 104 and the group ID 502, and the flow advances to a step S808. Meanwhile, when judged that the current location information 600 does not coincide with the group equipment installation location information 501 (i.e., NO in the step S811), the flow returns to the step S810 to wait for the current location information 600 and the HDID transmitted from the data storage apparatus 102.
• the data storage apparatus 102 receives the current location information 700 and the group ID 502 from the MFP 104. Thus, it is judged whether or not the values of the current location information 700 and the group ID 502 coincide with the group equipment installation location information 603 being the access control information held in the data storage apparatus 102. When judged that the values of the current location information 700 and the group ID 502 coincide with the group equipment installation location information 603 (i.e., YES in the step S808), the flow advances to a step S809.
• the boot process ends, and then an ordinary process is performed.
• the step S809 to the MFP 104 which transmitted the group ID 502 and the current location information 700, the data storage apparatus 102 transmits a set of the group ID 604 being the same as the group ID 502 and the corresponding access key 605.
• the MFP 104 obtains the group ID 604 of the data storage apparatus 102 and the corresponding access key 605, and stores them as the group ID 502 and the corresponding access key 503.
• a step S814 the MFP 104 expands the data storage apparatus 102 as the box, and displays the HDID "SHARED BOX-A" of the data storage apparatus 102 in a box discrimination information display area 1100 on an operation screen 5a of the operation unit 5 as shown in Fig. 13.
• the MFP 104 can .store the data in the data storage apparatus 102, and the box expansion process ends.
• Fig. 13 is the diagram showing an example of the operation screen of each of the MFP's 103a to 103c and the MFP 104 shown in Fig. 1. As shown in Fig.
• the information "32 living room" concerning the installation location of the data storage apparatus 102 of which the HDID is displayed in the box discrimination information display area 1100 is also displayed on the operation screen 5a.
• the data storage apparatus 102 in the embodiment can confirm the installation location of the apparatus itself when the power supply is turned on, confirm the mutual installation locations of the MFP's 103a to 103c and 104, and then write/read the data to/from the MFP's 103a to 103c and 104. That is, the data can be transmitted/received under the circumstance that the mutual locations of the equipments (data storage apparatus 102, MFP's 103a to 103c, and MFP 104) on the network can be assured.
• the confirmation (first check) as to whether or not the installation location of the data storage apparatus 102 itself at the time of activation is appropriate is appropriate
• the confirmation (second check) as to whether or not the installation location of the data storage apparatus 102 is appropriate for the MFP's 103a to 103c and 104 is appropriate for the MFP's 103a to 103c and 104
• the confirmation (third check) as to whether or not the installation locations of the MFP's 103a to 103c and 104 are appropriate for the data storage apparatus 102 are performed.
• triple checks it is possible to prevent that the data stored in the data storage apparatus 102 is used at the location other than the predetermined location.
• Fig. 10A and 10B when the data storage apparatus 102 is used at the location other than the predetermined location, the data storage apparatus 102 itself can perform the process to prevent data leakage .
• the process to prevent data leakage is not limited to the process of Fig. 10A. That is, the process shown in Fig. 10B may be performed.
• Fig. 10B is the flow chart showing another example of the data security protection process to be performed when NO in the step S804 of Fig. 9.
• the data storage apparatus 102 displays a message as shown in Fig.
• the data storage apparatus 102 displays a return password input section 1401 to request the user to input a password for returning data access.
• the data storage apparatus 102 encrypts, by using an encryption key held in the CPU 405, a file administration table in the storage medium unit 402, whereby it is possible to further reduce risk of data leakage in the storage medium unit 402.
• the data storage apparatus 102 waits until the user inputs the password to- the return password input section 1401 (i.e., return operation) .
• the user can shift or move the data storage apparatus 102 to an appropriate location.
• the password in question is the information which has already been notified to the normal user of the data storage apparatus 102.
• the flow advances to a step S805-4.
• the correct password is' not input to the return password input section 1401 and a certain period of time elapses (i.e., NO in the step S805-3) , the flow advances to a step S805-7 to perform a data deletion (or erasure) process.
• the location information obtaining unit 401 of the data storage apparatus 102 obtains the location information from the closest one of the location information provisioning terminals 100-A to 100-F as shown in Fig. 5, whereby the obtained location information is set to the current location information 600 shown in Fig. 6.
• step S805-5 it is judged by the data storage apparatus 102 whether or not the obtained location information (i.e., the location information set to the current location information 600) coincides with the HD installation permission location information 602.
• the flow advances to the step S805-6.
• the flow returns to the step S805-3.
• the data storage apparatus 102 decrypts, by using the encryption key held in the CPU 405, the file administration table in the data storage apparatus 102 encrypted in the step S805-2.
• the flow advances to the step S806 shown in Fig. 9.
• FIG. 11 is a flow chart showing an example of the process that the data storage apparatus 102 changes the network activation permission location information 601 when the result of the step S806 in Fig. 9 is "NO".
• the data storage apparatus 102 displays a message and a setting change GUI (graphical user interface) as shown in Fig. 14 on an operation screen 404a of the operation unit 404.
• the displayed message is, for example, the message to inform the user that the installation location of the data storage apparatus 102 is not the network activation permission location as shown in Fig. 14.
• numeral 1200 denotes an update setting input area which is used to urge the user to input an update setting location and a location update password.
• Numeral 1201 denotes a setting area change button which is used to display the screen shown in Fig. 15 on which the network activation permission location information 601, the HD installation permission location information 602 and the group equipment installation location information 603 shown in Fig. 6 are set through the GUI. Incidentally, the contents of Fig. 15 will be later explained in detail.
• the data storage apparatus 102 accepts the update setting location and the location update password as the information for changing the new network activation permission location information 601.
• the data storage apparatus 102 judges whether or not the location update password accepted in the step S902 is appropriate, and further judges whether or not the new network activation permission location information 601 (update setting location) is within the range of the HD installation permission location information 602. Then, when judged that the location update password is appropriate and the new network activation permission location information 601 is within the range of the HD installation permission location information 602 (i.e., YES in the step S903) , in a step S904, the data storage apparatus 102 updates the network activation permission location information 601.
• the data storage apparatus 102 can set to update the network connection location within a predetermined range (i.e., HD installation permission location range) , whereby it is possible to prevent that the data storage apparatus 102 at an unanticipated location is connected to the network 101, and it is thus possible to reduce risk of data leakage.
• a predetermined range i.e., HD installation permission location range
• Fig. 12 is a flow chart showing the example of the process to be performed when the data writing from the MFP 104 to the data storage apparatus 102 is performed.
• the scan indication button 1101 on the operation screen 5a shown in Fig. 13 is depressed by the user, in a step S1004, the MFP 104 recognizes such button depression as an instruction to write scanner data to the box (data storage apparatus 102) .
• the instruction in question also includes an instruction to scan a paper original.
• the MFP 104 causes, in response to the instruction recognized in the step S1004, the scanner unit 201 to read the paper original and create the data file to be stored in the box.
• the MFP 104 adds the group ID 502 of the MFP 104 and the access key 503 of the data storage apparatus 102 corresponding to the group ID 502 to the created data file. More specifically, the MFP 104 stores the group ID 502 and the access key 503 in the attribute information of the data file.
• the MFP 104 transmits the created data file to the data storage apparatus 102 by using the iSCSI protocol.
• the data storage process to the box (data storage apparatus 102) by the MFP 104 ends.
• the data storage apparatus 102 receives the data file transmitted from the MFP 104.
• the data storage apparatus 102 refers the attribute information of the received data file to judge whether or not the group ID 502 and the access key 503 added in the attribute information are proper.
• Fig. 15 is a diagram showing an example of the screen to be used to display/change the various setting areas concerning the data storage apparatus 102.
• the screen shown in Fig. 15 is a diagram showing an example of the screen to be used to display/change the various setting areas concerning the data storage apparatus 102.
• a network activation permission area 132, an HD installation permission area 131 and a group equipment installation area 130 are the areas respectively specified by the new network activation permission location information 601, the HD installation permission location information 602 and the group equipment installation location information 603 shown in Fig. 6.
• the user can change the setting area by using the GUI.
• the process of the steps S810 to S814 shown in Fig. 9 and the process of the steps S1004 to S1007 shown in Fig. 12 are achieved when the CPU 122 of each of the MFP's 103a to 103c and 104 executes the programs for achieving these processes.
• the process of the steps S801 to S809 shown in Fig. 9 the process of the steps S805-1 to S805-8 shown in Figs. 10A and 10B, the process of the steps S901 to S904 shown in Fig.
• the data storage apparatus 102 uses the hard disk as the means. for storing various data, the present invention is not limited to this. That is, it is also suitable to use various recording media such as non-volatile memories (flash memory, etc.) and the like as the means for storing data.
• the data storage apparatus 102 includes the operation unit 404 having the display unit, the present invention is not limited to this.
• the computer terminal 105 shown in Fig. 1 may function as the operation unit 404. That is, the computer terminal 105 may display the screens shown in Figs.
• the programs for achieving the various processes shown in Figs. 9, 10A, 10B, 11 and 12 in the data storage apparatus 102 and the MFP's 103a to 103c and 104 are read from the memories and executed by the CPU's, thereby achieving the functions of these processes.
• the present invention is not limited to this. That is, a part or all of the functions of the respective processes may be achieved by dedicated hardware.
• the above memory may include a magnetooptical disk, a non-volatile memory such as a flash memory or the like, a recording medium such as a CD-ROM or the like capable of performing only data reading, a volatile memory other than a RAM, or a computer readable/writable recording medium made by composing such memories as above.
• the present invention may be applied to a case where the program for achieving a part of the functions of the various processes in the data storage apparatus 102 and the MFP's 103a to 103c and 104 is recorded on a computer-readable recording medium, the program recorded on the recording medium in question is read and supplied into a computer system, and the part of the processes is actually performed based on the program supplied into the computer system.
• the computer system includes an OS (operating system) , hardware such as peripherals and the like.
• the above program may be transmitted from the computer system which has stored the program in question in its memory or the like to another computer system through a transmission medium or a transmission wave in the transmission medium.
• the transmission medium for transmitting the program is the medium which has an information transmission function.
• a network communication network
• a communication network communication line
• the above program may achieve a part of the above functions.
• the above program may be a so-called difference file (difference program) capable of achieving the above functions through a combination with the program already recorded in the computer system.
• a program product such as a computer- readable recording medium or the like on which the above program has been recorded may be applied to the embodiment of the present invention.
• the present invention it is controlled to disable from reading the data stored in the recoding medium in accordance with the specified location, whereby the process for preventing data leakage can be performed when the data storage apparatus is used at the location other then the predetermined location.
• the data to be used in the data processing apparatus are stored and unitarily administrated in the data storage apparatus, whereby it is possible to simplify the administration of the data to be used in the plural data processing apparatuses connected to the network.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Hardware Design (AREA)
• Theoretical Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Software Systems (AREA)
• Physics & Mathematics (AREA)
• General Engineering & Computer Science (AREA)
• General Physics & Mathematics (AREA)
• Multimedia (AREA)
• Signal Processing (AREA)
• Storage Device Security (AREA)

Priority Applications (1)

Applications Claiming Priority (2)

Publications (1)

Family

ID=34616359

Family Applications (1)

Country Status (3)

Cited By (3)

Families Citing this family (23)

Citations (5)

Family Cites Families (11)

• 2003
  • 2003-11-20 JP JP2003391064A patent/JP4574162B2/ja not_active Expired - Fee Related
• 2004
  • 2004-11-10 WO PCT/JP2004/017041 patent/WO2005050458A1/en active Application Filing
  • 2004-11-10 US US10/555,308 patent/US7315925B2/en not_active Expired - Fee Related

Patent Citations (5)

Also Published As

Similar Documents

Legal Events